sssd-devel August 2012

sssd-devel@lists.fedorahosted.org

22 participants
98 discussions

[PATCH] Removed unused variable assignment
by Ondrej Kos 06 Aug '12

06 Aug '12

https://fedorahosted.org/sssd/ticket/1453 -- Ondrej Kos Associate Software Engineer Identity Management Red Hat Czech cell: +420-736-417-909 phone: +420-532-294-558 ext.: 82-62558 irc: okos @ #brno

3 2

[PATCH] SSSDConfig: Fix nonfunctional SSSDDomain.remove_provider()
by Stephen Gallagher 05 Aug '12

05 Aug '12

We were removing the provider from the dictionary of enabled providers, but we were not deleting the actual *_provider key/value pair from the option dictionary. So we'd remove all options related to this provider from the configuration, but we wouldn't actually remove the provider itself (when the configuration was written back out). Also adds a regression test to the unit test suite. https://fedorahosted.org/sssd/ticket/1388

2 1

[PATCH] Fix the version number
by Jakub Hrozek 03 Aug '12

03 Aug '12

When I was releasing the last beta, I wrongly assumed that the version could be set to 1.9.0 That would however prevent us from being able to release another release candidate. Luckily the n-v-r in the Fedora builds is fine, so this only affects the nightly builds. Attached is a patch that reverts the version number to 1.8.97. I'll also fix the packages in our nightly repo.

2 2

why is the sssd_be process killed by the error "The Monitor returned an error [org.freedesktop.DBus.Error.NoReply]"
by Mark London 03 Aug '12

03 Aug '12

Hi - We use SSSD with LDAP, and this morning we are having network problems, and for some reason, this was causing the sssd_be process to be killed. From the log file I see: (Fri Aug 3 11:31:34 2012) [sssd[be[PSFC]]] [id_callback] (0x0010): The Monitor returned an error [org.freedesktop.DBus.Error.NoReply] And then sssd_be stops. I have to restart it manually. Why is it doing this? Here's my sssd.conf. What I can I do to prevent this? - Mark [sssd] config_file_version = 2 # Number of times services should attempt to reconnect in the # event of a crash or restart before they give up reconnection_retries = 3 # If a back end is particularly slow you can raise this timeout here sbus_timeout = 30 services = nss, pam # SSSD will not start if you do not configure any domains. # Add new domain configurations as [domain/<NAME>] sections, and # then add the list of domains (in the order you want them to be # queried) to the "domains" attribute below and uncomment it. ; domains = LOCAL,LDAP domains = PSFC [nss] # The following prevents SSSD from searching for the root user/group in # all domains (you can add here a comma-separated list of system accounts that # are always going to be /etc/passwd users, or that you want to filter out). filter_groups = root filter_users = root reconnection_retries = 3 debug_level = 0 # The entry_cache_timeout indicates the number of seconds to retain an # entry in cache before it is considered stale and must block to refresh. # The entry_cache_nowait_timeout indicates the number of seconds to # wait before updating the cache out-of-band. (NSS requests will still # be returned from cache until the full entry_cache_timeout). Setting this # value to 0 turns this feature off (default). ; entry_cache_timeout = 600 ; entry_cache_nowait_timeout = 300 [pam] reconnection_retries = 3 debug_level = 0 [domain/PSFC] description = LDAP domain with AD server enumerate = true min_id = 501 cache_credentials = true enum_cache_timeout = 86400 debug_level = 0 ldap_purge_cache_timeout = 0 ldap_enumeration_refresh_timeout = 300 id_provider = ldap chpass_provider = none auth_provider = ldap ldap_uri = ldaps://psfcdc1.psfc.mit.edu,ldaps://psfcdc2.psfc.mit.edu,ldaps://psfcdc3.p… ldap_tls_cacertdir = /etc/openldap/cacerts #ldap_tls_cacert = /etc/openldap/cacerts/test.cer ldap_schema = rfc2307bis ldap_search_base = dc=psfc,dc=mit,dc=edu ldap_user_search_base = dc=psfc,dc=mit,dc=edu ldap_group_search_base = dc=psfc,dc=mit,dc=edu ldap_default_bind_dn = CN=ADldapreadonly,OU=Computer Group,OU=PSFC Users,DC=psfc,DC=mit,DC=edu ldap_default_authtok_type = password ldap_default_authtok = ldapread #ldap_pwd_policy = none ldap_user_object_class = person ldap_user_name = sAMAccountName ldap_user_uid_number = msSFU30UidNumber ldap_user_gid_number = msSFU30GidNumber ldap_user_home_directory = msSFU30HomeDirectory ldap_user_shell = msSFU30LoginShell ldap_user_principal = userPrincipalName ldap_group_object_class = group ldap_group_member = msSFU30PosixMember ldap_user_member_of = msSFU30PosixMemberOf ldap_group_name = name ldap_group_gid_number = msSFU30GidNumber ldap_force_upper_case_realm = True

2 1

[PATCH] build ssh tests conditionally
by Pavel Březina 03 Aug '12

03 Aug '12

Recently added ssh unit tests were built even without ssh support which made 'make check' unable to finish.

3 2

New announcement from SSSD
by Transifex 03 Aug '12

03 Aug '12

Hello sssd, this is Transifex at https://www.transifex.com. A new announcement has been posted from project 'SSSD': ## String Freeze for SSSD 1.9.0 As of now, the SSSD is in string freeze for the SSSD 1.9.0 upstream release. We will be accepting translations until the release date which is scheduled for August 31st. Thank you in advance for your contributions! - To view the announcement in Transifex, please visit the following link: http://www.transifex.com/projects/p/sssd/announcement/2858/ Always at your service. -- Transifex -- Open Translation Platform To change your notification settings, please visit your profile page at https://www.transifex.com/notices/.

1 0

[PATCH] Fix various typos in documentation (breaks string freeze)
by Jakub Hrozek 03 Aug '12

03 Aug '12

Yuri submitted the patch in https://bugzilla.redhat.com/show_bug.cgi?id=845177 I reviewed it, looks fine to me. However, it would break the string freeze. I didn't announce the string freeze yet on Transifex, also because of this issue. I think it it more beneficial to break the string freeze, push this patch, push new translations to Transfixed and announce the string freeze there. Opinions welcome.

2 1

[PATCH] Don't call fo_set_{server, port}_status for SRV servers
by Jakub Hrozek 03 Aug '12

03 Aug '12

This bug was producing harmless, but annoying error messages.

2 2

[PATCH] Return value of fread in src/tools/sss_debuglevel.c no, longer ignored.
by Michal Židek 03 Aug '12

03 Aug '12

This patch should silent the GCC warning mentioned in ticket #1426 and adds new debug message when there is no pid in the SSSD_PIDFILE. https://fedorahosted.org/sssd/ticket/1426

3 2

Passing the torch
by Stephen Gallagher 02 Aug '12

02 Aug '12

It is with a heavy heart that I write this email. I've spent a large part of my engineering career working on the System Security Services Daemon - longer, in fact, than I've worked on any other single project. Furthermore, I've been here since the very beginning, having written some of the first lines of code committed to the git repository. I've been heavily-involved with the project ever since, designing and implementing the SBUS interface and service monitor code, then later taking on the role of the public face of the project. I pushed for its inclusion into Fedora as the default mechanism for managing centralized user data. I drove it through several Fedora Test Days. I went to conferences and lectured on the advantages that SSSD provides. I have invested a lot of my professional life into this project, and I'd like to believe that it shows. SSSD today is a successful, growing project that is included in many popular Linux distributions including Red Hat Enterprise Linux, Fedora, Debian, Ubuntu and Gentoo. I could not have done this on my own, however. The SSSD development team is comprised of many of the finest engineers that I've ever had the privilege to work with. One such engineer is the magnificent Jakub Hrozek, who has been for the last two years SSSD's most prolific developer and my right-hand man. So, as I prepare to make my way into other places and other projects, I cannot think of anyone better to take my place as SSSD project lead than Jakub. His Herculean efforts at driving SSSD 1.9.0 into today's feature-complete state have proven to me without a doubt that he is the right person for the job. I'd like to invite our community to welcome Jakub Hrozek as the new SSSD project lead, and to help him as he finds his feet in this new responsibility. Congratulations, and good luck!

4 3

← Newer
1
2
3
4
5
6
7
8
9
10
Older →

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

sssd-devel August 2012